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Two separated observers, by applying local operations 
to a supply of not-too-impure entangled states {e.g. singlets 
shared through a noisy channel), can prepare a smaller num- 
ber of entangled pairs of arbitrarily high purity {e.g. near- 
perfect singlets). These can then be used to faithfully tele- 
port unknown quantum states from one observer to the other, 
thereby achieving faithful transmission of quantum informa- 
tion through a noisy channel. We give upper and lower bounds 
on the yield D{M) of pure singlets (|*I'~)) distillable from 
mixed states M, showing D{M) > if (*" IM]*") > \. 



The techniques of quantum teleportation and quan- 
tum data compression |^,^ exemplify a new goal of quan- 
tum information theory, namely to understand the kind 
and quantity of channel resources needed for the trans- 
mission of intact quantum states, rather than classical 
information, from a sender to a receiver. 

In this approach, the quantum source S is viewed as 
an ensemble of pure states ipi, typically not all orthogo- 
nal, emitted with known probabilities pi. Transmission 
of quantum information through a channel is considered 
successful if the channel outputs closely approximate the 
inputs as quantum states. Because non-orthogonal states 
in principle cannot be observed without disturbing them, 
their faithful transmission requires that the entire trans- 
mission processes be carried out by a physical apparatus 
that functions obliviously, that is, without knowing or 
learning which ipi are passing through. 

Just as classical data compression techniques allow 
data from a classical source to be faithfully transmit- 
ted using a number of bits per signal asymptotically ap- 
proaching the source's Shannon entropy, — X)i Pi log2 Pii 
quantum data compression |^,^ allows quantum data 
to be transmitted, with asymptotically perfect fidelity, 
using a number of 2-state quantum systems or qubits 
{e.g. spin-i particles) asymptotically approaching the 
source's von Neumann entropy 

S{p) = -Trplog2P, where p = ^p,|?/'i)(V'j|- (1) 

i 

Quantum teleportation achieves the goal of faithful 
transmission in a different way, by substituting classi- 
cal communication and prior entanglement for a direct 



quantum channel. Using teleportation, an arbitrary un- 
known qubit can be faithfully transmitted via a pair of 
maximally- entangled qubits {e.g. two spin-i particles in a 
pure singlet state) previously shared between sender and 
receiver, and a 2-bit classical message from the sender to 
the receiver. 

Both quantum data compression and teleportation re- 
quire a noiseless quantum channel — in the former case 
for the direct quantum transmission and in the latter 
for sharing the entangled particles — yet available chan- 
nels are typically noisy. Since quantum information can- 
not be cloned Q, it would perhaps appear impossible to 
use redundancy in the usual way to correct errors. Nev- 
ertheless, quantum error-correcting codes have recently 
been discovered |^ which operate in a subtler way, es- 
sentially by embedding the quantum information to be 
protected in a subspace so oriented in a larger Hilbert 
space as to leak little or no information to the environ- 
ment, within a given noise model. We describe another 
approach, in which the noisy channel is not used to trans- 
mit the source states directly, but rather to share entan- 
gled pairs {e.g. singlets) for use in teleportation. But be- 
fore they can be used to teleport reliably, the entangled 
pairs must be purified — converted to almost-perfectly en- 
tangled states from the mixed entangled states that result 
from transmission through the noisy channel. We show 
below how the two observers can accomplish this purifi- 
cation, by performing local unitary operations and mea- 
surements on the shared entangled pairs, coordinating 
their actions through classical messages, and sacrificing 
some of the entangled pairs to increase the purity of the 
remaining ones. Once this is done, the resulting almost 
perfectly pure, almost perfectly entangled pairs can be 
used, in conjunction with classical messages, to teleport 
the unknown quantum states ipi from sender to receiver 
with high fidelity. The overall result is to simulate a 
noiseless quantum channel by a noisy one, supplemented 
by local actions and classical communication. 

Let M be a general mixed state of two spin-^ par- 
ticles, from which we wish to distill some pure entan- 
glement. The state M could result, for example, when 
one or both members of an initially pure singlet state 
— (Ti ^ iT)/'\/2 are transmitted through a noisy 
channel to two separated observers, whom we shall call 
Alice and Bob. The purity of Af can be conveniently 
expressed by its fidelity 
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F={^-\M\^-) (2) 

relative to a perfect singlet. Though nonlocally defined, 
the purity F can be computed from the probability 
of obtaining parallel outcomes if the two spins are mea- 
sured locally along the same random axis: one finds that 
F= l-3P||/2. 

The recovery of entanglement from M is best under- 
stood in the special case that M is already a pure state of 
the two particles, M = |T)(T| for some T. The quantity 
of entanglement, E{T), in such a pure state is naturally 
defined by the von Neumann entropy of the reduced den- 
sity matrix of either particle considered separately: 

£;(T) = SipA) = S{pb), (3) 

where pA = TrB(|T)(T|), and similarly for ps- For pure 
states, this entanglement can be efficiently concentrated 
into singlets by the methods of which use local oper- 
ations and classical communication to transform n input 
states T into m singlets with a yield m/n approaching 
E{T) as n — > oo. Conversely, given n shared singlets, 
local actions and classical communication suffice to pre- 
pare m arbitrarily good copies of T with a yield m/n 
approaching 1/E(T) as n — > oo. 

Returning now to the problem of obtaining singlets 
from mixed states, the first step in our purification pro- 
tocol is to have Alice and Bob perform a random bilateral 
rotation on each shared pair, choosing a random SU(2) 
rotation independently for each pair and applying it lo- 
cally to both members of the pair (the same result could 
also be achieved by choosing from a finite set of rotations 
{Bx, By,Bz, 1} defined below). This transforms the ini- 
tial general two-spin mixed state M into a rotationally 
symmetric mixture 

Wf^ F-\^-){^-\ + ^\^+){^i>+\ 

of the singlet state ^E"" and the three triplet states '5+ — 
in + iT)/V2 and $± = (TT ± ii)/V2. Because of the 
singlet's invariance under bilateral rotations, the sym- 
metrized state Wf, which we shall call a Werner state 0] 
of purity F, has the same F as the initial mixed state M 
from which it was derived. 

At this point it should be recalled that two mixed 
states having the same density matrix are physically in- 
distinguishable, even though they may have had different 
preparations. Therefore, subsequent steps in the purifica- 
tion can be carried out without regard to any properties 
of the original mixed state M, or of the noisy channel(s) 
that may have generated it, except for the purity F. 

Mixtures of the four states ^'^ and $^ — known as the 
four Bell states — are particularly easy to analyze because 
the Bell states transform simply under several kinds of 
local unitary operations. Besides the random bilateral 
rotation already described, several other local operations 
will be used in entanglement purification. 



• Unilateral Pauli rotations (that is, rotations by tt radi- 
ans about the x, y, or z axis) of one particle in an en- 
tangled pair. These operations map the Bell states onto 
one another in a 1:1 pairwise fashion, leaving no state 
unchanged; thus ax maps (Tz maps vj/* vJ/T 
and ^ <i>T, while cry maps ^I^* <-> We ignore 
overall phase changes because they do not affect our ar- 
guments. 

• Bilateral 7r/2 rotations B^, By, and B^ of both particles 
in a pair about the x, y, or z axis respectively. Each of 
these operations leaves the singlet state and a different 
one of the triplets invariant, interchanging the other two 
triplets, with B^ mapping ^ By mapping <i>^ <-> 

and Bz mapping ^ <i>^. Again we omit phases. 

• The quantum XOR or controUed-NOT operation j|] 
performed bilaterally by both observers on corresponding 
members of two shared pairs. The unilateral quantum- 
XOR is an operation on two qubits held by the same 
observer which conditionally flips the second or "target" 
spin if the first or "source" spin is up, and does nothing 
otherwise. As a unitary operator it is expressed 

Uxor = \ U^T){UiT \ + \ UIt){U\t \ , . 

+ I lsiT){lsiT\ + \ls^T){is^T |. ^ ' 

The bilateral XOR (henceforth BXOR) operates in a 
similar fashion on corresponding members of two pairs 
shared between Alice and Bob: if Alice holds spins 1 and 
3, and Bob holds spins 2 and 4, a BXOR, with spins 1 
and 2 as source and spins 3 and 4 as target would con- 
ditionally flip spin 3 if and only if spin 1 was up, while 
conditionally flipping spin 4 if and only if spin 2 was up. 
A BXOR on two states leaves them both invariant. 
The result of applying BXOR to other combinations of 
Bell states is shown below, omitting phases. 
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• Besides these unitary operations, Alice and Bob per- 
form one kind of measurement: measuring both spins in 
a given pair along the z spin axis. This reliably distin- 
guishes ^I' states from $ states, but cannot distinguish + 
from — states. Of course after the measurement has been 
performed, the measured pair is no longer entangled. 

We now show that, given two Werner pairs of fidelity 
F > i, Alice and Bob can use local operations and two- 
way classical communication to obtain, with probability 
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greater than j, one Werner pair of fidelity F' > F, where 
the F' satisfies the recurrence relation 



i^2 + |F(l-i^) + |(l-F)2- ^ ' 

To achieve this, the following protocol is used: 

Al. A unilateral ay rotation is performed on each of 
the two pairs, converting them from mostly-^*" Werner 
states to the analogous mostly-$+ states, ie states with 
a large component F > i of $+ and equal components 
of the other three Bell states. 

A2. A BXOR is performed on the two impure <f>+ states, 
after which the target pair is locally measured along the z 
axis. If the target pair's z spins come out parallel, as they 
would if both inputs were true states, the unmeasured 
source pair is kept; otherwise it is discarded. 

A3. If the source pair has been kept, it is converted 
back to a mostly-^'" state by a unilateral ay rotation, 
then made rotationally symmetric by a random bilateral 
rotation (cf. 

Because F'{F) is continuous and exceeds F over the 
entire range i < F < 1, iteration of the above protocol 
can distill Werner states of arbitrarily high purity Fout < 
1 from a supply of input mixed states M of any purity 
Fin > 5- The yield (purified output pairs per impure 
input pair) is rather poor, and tends to zero in the limit 
-Fput 1 ; but by BXORing a variable number k{F) « 
source pairs, rather than 1, into each target 
pair before measuring it, the yield can be increased and 
made to approach a positive limit as Fout 1- (For this 
choice of fc, to lowest order in 1— F, the iteration formula 
for purity agrees with Eq. (@): F'(F) = 1- |(1-F). The 
expected fraction of the pairs discarded at each step, also 
to lowest order, is |(1— F) 2 . One thus obtains a non-zero 
yield as Fout ^1-) We do not give the asymptotic yield 
from this method, because a higher yield can be obtained 
by combining it with another method to be described 
below, which uses a supply of previously purified pairs 
in the manner of a breeder reactor, consuming some in 
order to produce more than the number consumed. 

The basic step (a "BXOR test") used in this method 
consists of bilaterally XORing a subset of the impure 
pairs, used as sources, into one of the pure $+ states, 
used as a target, followed by measurement of the target. 
Consulting the table above, we see that each 5"+ or 
source pair toggles the target between and with- 
out affecting the source. Thus a BXOR test, like a parity 
check on classical data, tells Alice and Bob whether there 
are an even or odd number of 5" states in the tested sub- 
set. By performing a number of BXOR tests, on different 
subsets of the original impure pairs, all the ^ states can 
be found and corrected to $ states. A similar procedure 
is then used to find all the <1>^ states and correct them 
to the desired The full protocol is described below. 

Bl. Alice and Bob start with n impure pairs described by 
any Bell-diagonal density matrix W with S{W) < 1, and 



n{S{W)+5) prepurified <!>+ states, prepared, for example, 
by the variable blocksize recurrence method described 
above. Here ^ is a positive constant that can be allowed 
to approach in the limit of large n. 

B2. Using the prepurified <&+ pairs as targets, Alice and 
Bob perform BXOR tests on sufficiently many random 
subsets of the impure pairs to locate all ^' states, with 
high probability, without distinguishing VP"*" from 
Once found, the are converted respectively to by 
applying a unilateral ay rotation to each of them. The 
impure pairs now consist only of and states. 
B3. Next Alice and Bob do a bilateral By to convert the 
<I>^ states into while leaving the states invariant. 
This done, they perform BXOR tests on sufficiently many 
more random subsets to find all the new states with 
high probability. Once found, these states are corrected 
to the desired form by unilateral a^ rotations. 

The number of BXOR tests per impure pair required 
to find all the errors, with arbitrarily small chance of fail- 
ure, approaches the entropy of the impure pairs, S{W) = 
— TrM^log2 W, in the limit of large n. This follows from 
these facts: 

• For any two distinct n-bit strings the probability that 
they agree on the parities of r independent random sub- 
sets of their bits is < 2-'' @. 

• The probability distribution Px over n-bit strings x, 
where x represents the original sequence of ^/"^ values 
of the impure pairs, receives almost all its weight from 
a set of "typical" strings containing Ni = 2^(^)+<^(^) 
members, where H(X) is the Shannon entropy of Px- 
Similarly, the conditional distribution Py\x=x of n-bit 
strings y, representing the +/— values of a sequence of 
impure pairs whose ^/^I* sequence is a;, receives almost all 
its weight from a set of typical strings containing N2 = 
2HiY\x=x)+o{V^) members. 

Let ri BXOR tests be performed in the first round, 
whose goal is to find x uniquely. The expected number 
of "false positives" — strings in the typical set, other than 
the correct a;, which agree with it on ri subset parities — 
is < iVi2~''i . Thus the chance of a false positive becomes 
negligible when ri > log2 A^i- Similarly the chance of a 
false positive in the second round after r2 BXOR tests is 
negligible when r2 > logj Af2- Combining these results, 
and recalling that \og2{NiN2) = nS{W) + 0[^/n), we 
obtain the desired result, viz. that asymptotically S{W) 
BXOR tests per impure pair suffice to find all the errors. 

The breeding method has a yield 1 — S{W), producing 
more pure pairs than consumed if the mixed state's von 
Neumann entropy, S{W), is less than 1. For Werner 
states the yield 

l-S{WF) = l + F\og^F+{l-F)\ogJ^ (8) 

is positive for F> 0.8107. 

The use of prepurified pairs as targets simplifies analy- 
sis of the protocol by avoiding back-action of the targets 
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on the sources, but is not strictly necessary. Even with- 
out the prepurified pairs, using only impure Bell-diagonal 
states W as input, it is possible to design a sequence 
of BXORs and local rotations that eliminate approxi- 
mately half the candidates for x or y at each step, achiev- 
ing the same asymptotic yield 1 — S{W) as the breeding 
method. This non-breeding protocol requires only one- 
way classical communication, allowing it to be used to 
protect quantum information from errors during storage 
(cf (|Jll[]) as well as during transmission. 

We do not yet know the optimal asymptotic yield 
D{M) of purified singlets distillable from general mixed 
states M, nor even from Werner states. Fig. 1 compares 
the yields of several purification methods for Werner 
states Wf with an upper bound E{Wf) given by 



E{Wf) 
E{Wf) 



H2{\+^F{l-F)) 




if F>l/2 
if F<l/2. 



(9) 



Here H2{x) — — xlogg x — (1— x) log2(l— x) is the dyadic 
Shannon entropy. This upper bound is based on the fact 
that Wf, for F> i, can be expressed as an equal mixture 
of eight pure states 



1 - F 



(±|*+)±|ci>-)± (10) 



each having entropy of entanglement equal to the right 
side of eq. while for F<^, Wp can be expressed 
as mixture of unentangled product states tti iii Tii ^nd 
It. In fact ||ll| these are the least entangled ensembles 
realizing Wf\ therefore, E{Wf) may be viewed as the 
Werner state's "entanglement of formation" — the asymp- 
totic number of singlets required to prepare one Wf by 
local actions. Because expected entanglement cannot 
be increased by local actions and classical communica- 
tion ||l^, a mixed state's distillable entanglement D{M) 
cannot exceed its entanglement of formation E{M). 

We have seen that F = ^ is a threshold below which 
Werner states can be made from unentangled ingredients, 
and above which they can be used as a starting material 
to make pure singlets. This is further grounds (cf also 
[p2t) for regarding all Werner states with F > ^ as non- 
local even though only those with F > {2+3V2)/8 « 0.78 
violate the Clauser-Horne-Shimony-Holt (isj inequality. 
Distillable entanglement and entanglement of formation 
are two alternative extensions of the definition of entan- 
glement from pure to mixed states, but for most mixed 
states M we do not know the value of either quantity, 
nor do we know an M for which they provably differ. 

We thank David DiVincenzo for valuable advice. 
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FIG. 1. Log-log plot of entanglement distillable from 
Werner states of purity F by various methods, versus F—^. 
Do = breeding method alone (eq. |h Dr — breeding pre- 
ceded by recurrence method of eq. ^; Dm = breeding pre- 
ceded by recurrence of [^; E = entanglement of formation, 
eq. H, an upper bound on entanglement yield of any method. 
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